WebCookies logo Web Cookies Scanner

All-in-one free web application security tool. Web application vulnerability and privacy scanner with support for HTTP cookies, Flash, HTML5 localStorage, sessionStorage, CANVAS, Supercookies, Evercookies. Includes a free SSL/TLS, HTML and HTTP vulnerability scanner and URL malware scanner.

Websites setting Frame-Options HTTP header

Values

Most popular variants of the header value (we only show this when there's just a bunch of variants):

A misspelled and incorrect variant of the X-Frame-Options header introduced as a result of incorrect interpretation of RFC 7034 standard. The Frame-Options variant was introduced to be used in Content Security Policy (CSP) while for HTTP headers the X-Frame-Options remains the valid name.

Reference...

We have seen 90 websites setting the Frame-Options HTTP header and 6 unique values of this header.

Fully automated RESTful API is now available. Subscribe for your free trial today!